Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

Small fix to detect_munged_arguments to make Thiagi game shells work.

They have a '..' in the arguments, so we are allowing one of these only.

I wonder if this is Ger's problem too.
  • Loading branch information...
commit 14824286cb5460a61e0dfb16c475040a2d899ddc 1 parent 3f4e0d9
moodler authored
Showing with 1 addition and 1 deletion.
  1. +1 −1  lib/weblib.php
View
2  lib/weblib.php
@@ -510,7 +510,7 @@ function validate_email ($address) {
}
function detect_munged_arguments($string) {
- if (ereg('\.\.', $string)) { // check for parent URLs
+ if (substr_count($string, '..') > 1) { // We allow one '..' in a URL
return true;
}
if (ereg('[\|\`]', $string)) { // check for other bad characters
Please sign in to comment.
Something went wrong with that request. Please try again.